CVE-2008-6318: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter, a different vector than CVE-2008-6317...

CVE-2008-6317: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflang parameter, a different issue than CVE-2008-6318. NOTE: this might be the same issue as CVE-2008-631...

PHPmyGallery 1.5beta (common-tpl-vars.php) LFI/RFI Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== PHPmyGallery 1.5beta common-tpl-vars.php LFI/RFI Vulnerabilities ================================================================== Phpmygallery-1.5beta common-tpl-vars.php...

PHPmyGallery 1.5beta - common-tpl-vars.php LocalRemote File Inclusion

PHPmyGallery 1.5beta - common-tpl-vars.php LocalRemote File Inclusion Phpmygallery-1.5beta common-tpl-vars.php Multiple Local File Inclusion Vulnerabilities Script Name: Phpmygallery Version: 1.5beta Autor: CoBRa21 My Site: www.ipbul.org Download:...

GetBlog local File inclusion ..

Hello,, GetBlog local File inclusion .. http://sourceforge.net/projects/geblog Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Exploit : - tpl/Default/index.php?tplname=../../../../../../../etc/passwd00 WwW.SoQoR.NeT...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion 42VV10 in contenidohacks in Mods 4 Xoops Contenido eZ publish pdf4cms allow remote attackers to execute arbitrary PHP code via a URL in the cfgPathInc parameter to 1 mainupl.php, 2 mainconeditside.php, 3...

CVE-2007-1018: Undefined Security Weakness

PHP remote file inclusion vulnerability in tpl/header.php in VirtualSystem VS-News-System 1.2.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. NOTE: the provenance of this information is unknown; the detai...

Innovate Portal 2.0 - acp.php Remote Code Execution

Innovate Portal 2.0 - acp.php Remote Code Execution DEVIL TEAM IRC: 72.20.18.6:6667 devilteam ======== Contact: [email protected] or http://www.rahim.webd.pl/ cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM...

CVE-2006-3164

SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the firstrow parameter...

CVE-2006-3164

The CVE-2006-3164 entry concerns a SQL injection in the TPL Design tplShop 2.0 and earlier. The vulnerability is triggered in category.php via the first_row parameter, allowing remote attackers to alter or disclose data by executing arbitrary SQL commands. The NVD entry assigns a CVSS v2 base sco...

CVE-2005-1876: Improper Control of Generation of Code

Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template .tpl file...